Should I remove “Bulz.229901”?

The Bulz.229901 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.229901 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Anomalous binary characteristics

How to determine Bulz.229901?


File Info:
crc32: 12FFD4E0
md5: cb4459b003da005489dbfb2c097eccbc
name: CB4459B003DA005489DBFB2C097ECCBC.mlw
sha1: 1573f123b105163f880acf34565578dbd16a540a
sha256: 6e59be89e06ba8336ecb3457e8f3b5aa6ce042a6cb588dffd6ed363f5eedcbf9
sha512: 2da4cb1376c266545857e1b1c36656945cddb39e6eacd909b26b6483c5db12a7ae30e4481084c84b891432f4294583680077ab9da944f9ce33858d199fdcb8e3
ssdeep: 12288:7YVffUV3u2aOyl0OuC26D0cNyI7dWZvFEdXVCwfQXfPUiihKFxzK:gXI5aOm0JCJ00ZKv2l41XfMQ
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:
LegalCopyright: 
InternalName: 
FileVersion: 1.0.3.24
CompanyName: 
LegalTrademarks: 
Comments: 1
ProductName: 
ProductVersion: 1
FileDescription: 
OriginalFilename: 
Translation: 0x0804 0x03a8

Bulz.229901 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.229901
Sangfor	Trojan.Win32.Wacatac.C
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Trojan:Win32/StartPage.2e41087d
Cybereason	malicious.003da0
APEX	Malicious
Avast	FileRepMalware
BitDefender	Gen:Variant.Bulz.229901
MicroWorld-eScan	Gen:Variant.Bulz.229901
Ad-Aware	Gen:Variant.Bulz.229901
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZelphiF.34266.0S0@aC7kpCpb
McAfee-GW-Edition	BehavesLike.Win32.Dropper.ch
FireEye	Generic.mg.cb4459b003da0054
Emsisoft	Gen:Variant.Bulz.229901 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1137174
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Bulz.229901
McAfee	GenericRXMQ-IA!CB4459B003DA
MAX	malware (ai score=80)
VBA32	Trojan.Wacatac
Rising	Adware.AdPop!1.CEB0 (CLASSIC)
Ikarus	Trojan.Win32.StartPage
MaxSecure	Trojan.Malware.108838609.susgen
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Bulz.229901?

Bulz.229901 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X